On 01-31-2024 12:37AM, Andrei Borzenkov wrote:
On Wed, Jan 31, 2024 at 9:33 AM -pj via openSUSE Users
<users@lists.opensuse.org> wrote:
Hi, I am receiving this message when passing: journalctl -b -1 -r

Hint: You are currently not seeing messages from other users and the system.

      Users in the 'systemd-journal' group can see all messages. Pass -q to

      turn off this notice.

The issue is that I am in the "systemd-journal" group.

Thinkcentre-M57p:/usr/bin> groups paul

paul : paul audio cdrom systemd-journal

Thinkcentre-M57p:/usr/bin>

Show

id -a

output. Also check permissions on journal (sub-)directories -
/run/log/journal and /var/log/journal (and of course on the parent
path).
	Thinkcentre-M57p:/> id -a
	uid=1000(paul) gid=1000(paul) groups=1000(paul),474(systemd-journal),488(cdrom),489(audio)
	Thinkcentre-M57p:/>

	Thinkcentre-M57p:/run/log/journal> ls -lah

	total 0

	drwxr-sr-x 2 root systemd-journal 40 Jan 31 00:24 .

	drwxr-xr-x 3 root root            60 Jan 31 00:24 ..

	Thinkcentre-M57p:/var/log/journal> ls -lah

	total 4.0K

	drwxr-sr-x 1 root systemd-journal   64 Sep 18  2021 .

	drwxr-xr-x 1 root root            1.4K Jan 31 00:25 ..

	drwxr-sr-x 1 root systemd-journal  16K Jan 31 00:25 d27ebfd1ed87479da329ef76152c4dc3

        Thinkcentre-M57p:/var/log/journal>
	Thinkcentre-M57p:/> ls -lah

	total 16K

	drwxr-xr-x   1 root root  142 Jun  3  2021 .

	drwxr-xr-x   1 root root  142 Jun  3  2021 ..

	lrwxrwxrwx   1 root root    7 Dec 10 12:49 bin -> usr/bin

	dr-xr-xr-x   1 root root 1.3K Jan 30 17:22 boot

	drwxr-xr-x  21 root root 4.3K Jan 31 09:41 dev

	drwxr-xr-x   1 root root 4.6K Jan 31 00:15 etc

	dr-xr-xr-x   1 root root   14 Jan 21 18:18 home

	lrwxrwxrwx   1 root root    7 Dec 10 12:49 lib -> usr/lib

	lrwxrwxrwx   1 root root    9 Dec 10 12:49 lib64 -> usr/lib64

	dr-xr-xr-x   1 root root    0 Jun  9  2021 mnt

	dr-xr-xr-x   1 root root   14 Jan  6 01:12 opt

	dr-xr-xr-x 317 root root    0 Jan 31 00:24 proc

	drwx------   1 root root  796 Jan 31 00:15 root

	drwxr-xr-x  45 root root 1.2K Jan 31 09:41 run

	lrwxrwxrwx   1 root root    8 Dec 10 12:49 sbin -> usr/sbin

	drwxr-x---   1 root root  316 Jan 31 03:32 .snapshots

	dr-xr-xr-x   1 root root   22 Jun  9  2021 srv

	dr-xr-xr-x  13 root root    0 Jan 31 00:24 sys

	drwxrwxrwt  14 root root  400 Jan 31 09:51 tmp

	drwxr-xr-x   1 root root  124 Dec 10 12:49 usr

	drwxr-xr-x   1 root root  148 Dec 11 21:44 var

	Thinkcentre-M57p:/>

What is the 's' in group for /run/log/journal/systemd-journal and /var/log/journal/systemd-journal (stickybit)? What is the file 
d27ebfd1ed87479da329ef76152c4dc3 used for?
 


      
What is going on here? What am I doing wrong and not understanding about this "Hint" above? Ok,
powercycling fixed the issue. Do you recommend adding admin user to "systemd-journal" group typically?